You are here

LAN to Mesh WAN

14 posts / 0 new
Last post
iz5fsa
iz5fsa's picture
LAN to Mesh WAN
Hi everybody
I don't fully understand how to manage "LAN to WAN" and "LAN ti Mesh WAN" features.
I have this mesh-Lan deployed, all device are on version 3.25.5.1

IQ5BL-node (hAP ac) in Club Station downtown with WAN connected to local lan (with internet access)
          |
          | eth5 with POE enabled
          |
IQ5BL-link (DtD)
          |
          | WiFi link %GHz (4 miles away)
          |
IR5ZZV-link (D2D)
          |
          | eth5 with POE enabled
          |
IR5ZZV-node (hAP ac) on local repeater location

I want to give IR5ZZV-node lan devices internet access like in IQ5BL-node local lan. I've tried to switch off "LAN to WAN" and switch on "LAN to Mesh WAN" in IQ5BL-link, IR5ZZV-link and IR5ZZV-node but no success on my goal. How can I win the deal? May I "tag" the WAN port in each eth port in which I want to have internet access? Or it's better deploying the mesh in another way?

Thanks for your help, friends!

73 de Leo IZ5FSA
nc8q
nc8q's picture
4 miles away is not a DtD link, it is a RF link
Hi, Leo:

You can give every LAN device in the entire AREDN network internet access.
Enable 'Mesh to WAN'.
I do not know how to only give internet access to an individual remote LAN device.
Providing internet access to a remote LAN device using the manufacturer's OS would be simpler.

73, Chuck
 
Image Attachments: 
iz5fsa
iz5fsa's picture
Hi Chuck
Hi Chuck
I don't want to give WAN access to entire domain local.mesh.......
Can you explain me the difference between 
LAN to WAN - Allow any LAN device to use local WAN.
LAN to Mesh WAN - Allow any LAN device to use remote WAN.
should be alternative? 
 
AB7PA
picture of settings
iz5fsa
iz5fsa's picture
I'm trying to solve the trick!!!
Well, that's my config...

All routers are hAP AC lite (only IZ5FSA-HOME is an hAP ac2). Mesh devices are Ubiquiti 300/400 or Miktotik SXT on 5GHz.

I have my AREDN Mesh main node in IQ5BL-SHACK, port 0 connected to WAN.

My GOAL is give WAN access via MESH only to IQ5BL-link, IR5ZZV-NODE and his LAN connected devices as LoraMeshCom device and UBNT-IPCamera.
I dont' want IZ5FSA-link to have access to mesh-WAN.

If I switch on "WAN to mesh" on IQ5BL-SHACK every mesh connected device can go to Internet via IQ5BL-SHACK.

I've tried to switch on "LAN to mesh WAN" on every device connected (DtD or LAN) to IR5ZZV-NODE (that have no WAN port attached) and "LAN to WAN" in IZ5FSA-HOME and IZ5FSA-link but no business at all.

Do I've misread instructions? I'll think this will do the job... probably does it take a lot of time to work? Or there are some special tricks to improve?

Any help will be useful.. and I can offer my structure for some "developers team" test before make it fully operational.


73 de Leo IZ5FSA
Image Attachments: 
AB7PA
Might be possible
Leo, you might be able to do what you showed above by using custom firewall rules on your iq5bl-shack node.  You will need to learn how to create NFtables firewall statements (if you don't already know how) -- and you will need to experiment with lots of different settings to see if any of them work.  Here is where the custom firewall rules are described in the online documentation.  What you want to do is complicated, so it is not going to be easy but it might be possible with a lot of effort experimenting with it.
K7EOK
I have never used LAN to Mesh
I have never used LAN to Mesh WAN.  I have on occasion used Mesh to WAN in order to temporarily give WAN access to a remote node so I can do package maintenance, but immediately turned it off when done.  I also read that if you provide Mesh to WAN it is NOT selective.

AREDN is not a method of providing WAN access to remote sites.  Period.  It not only is illegal, but the potential for traffic to bog down the entire Mesh you are on can be a real issue.  We had our regional mesh routing screwed up a few years ago by folks leaving WAN connections active, then unknowingly their devices routed regular internet traffic.  I manage several sites that have no WAN, and one of my occasional chores is to do a traceroute to google.com to see if it does route, and note which node is the offending one then later contact that ham to request they turn the feature off.

Orv several times has mentioned that if you have a specific reason to need to route internet over rf, just buy another set of microwave devices and use the standard factory firmware to create the link.  Put your call sign on the SSID and you are good to go.

I may have a detail wrong or have missed a nuance but that's what I think I know ....

Ed
iz5fsa
iz5fsa's picture
Lan to Mesh WAN
I don't fully understand the mode to use Lan to Mesh WAN...

My goal is to connect to the WAN a remote NODE... I can use a P2P-D2D connection from WAN capable NODE and the remote NODE... but I don't want to expand the WAN to all the MESH.

Someone can help me?

TNX de Leo IZ5FSA
 
K6CCC
K6CCC's picture
As far as I know, it's all or
As far as I know, it's all or nothing.  No way to limit WAN access to just one remote node.
 
nc8q
nc8q's picture
it's all or nothing
+1 with K6CCC.

Instead of AREDN firmware, the manufacturer's firmware in bridge mode will 
provide WAN access to a remote network.

73, 
Chuck
 
iz5fsa
iz5fsa's picture
Controlled escape on WAN from inside a Mesh... (strange title)
Hi Chuck.
Respect your proof knowledge of networking... but even a single PC lan connected to a remote mesh node cannot have a wan forward to a wan capable node?
I'm wondering even if a router with a D2D setted up as P2P can handle LAN to Mesh Wan in a different way for a remote node... there is not so much info in online documentation...

Thanks for your help.

73
Leo
KC6ONL
KC6ONL's picture
Is there an AREDN map for IL, or the IL/WI/IN areas?
I'm a noob in all of this; and, IMHO, my tea leaves aren't showing a positive future for our Nation.  I want to get something setup...quickly.

I've got 2 Internet feed, both high-speed, but have got pine trees immediately to my West (neighbor has 2), and about 1/10th mile, neighbor has one HUGE blue spruce.  In my front yard, I, too, have a blue spruce.  I'm thinking my back yard, and as I'd have to register the antenna with my city (permit-wise, that is), I'd like to have something small and compact (say 15 feet or less).

First, is this doable?

And if 'yes', is there a map, and how do I get this all setup?

I've got multiple PoE network switches, got PoE injectors, and got a lightning arrestor for networks (just in case).

Ideas?

-rad
nc8q
nc8q's picture
Modifying microwave propagation with firmware/software.
This post started with "LAN to Mesh WAN".

rad-:

I do not believe microwave propagation can be modified by firmware/software configuration.
If you are surrounded by trees, I think AREDN is not a solution to your networking desires.

Please start a new post for the discussion of a new topic.

Whereas this post is off-topic, it will be deleted in 7 days.

73, Chuck
 
K7EOK
We've already encouraged the
We've already encouraged the selective internet routing to use factory firmware, not AREDN.  Now rad wants to move microwave through trees, a relatively short distance connection either factory/internet or AREDN?

Is this a "line of trees" or is it a deep section with many trees?  How far are the trees from power?  There is ground burial grade ethernet cable ... so if less than 100m lenght you could send ethernet signal to the tree, and point from the neighbor side of the tree to the other user.

Or setup a relatively large solar panel and battery as a power source (budget 10W continuous per device) and put antennas back to back on the same tree (on different channels).  It's not difficult to plan out, the only issue is power in the remote location.

Ed

Theme by Danetsoft and Danang Probo Sayekti inspired by Maksimer